Juniper Juniper Certifications JN0-541 Questions & Answers

• Question 121:

  Which interface does IDP use to communicate with Security Manager?

  A. eth0

  B. console port

  C. eth1

  D. HA port

  Correct Answer: A

• Question 122:

  In the Enterprise Security Profiler, what would you define under Permitted Objects?

  A. Define traffic that violates your security policy.

  B. Definevalid, permitted activity on the network.

  C. Define any attacks that violate your security policy.

  D. Define violations of permitted activity on the network.

  Correct Answer: B

• Question 123:

  Given the following steps:

  a.

  Attach the sensor to the management network.

  b.

  Place the sensor inline in network.

  c.

  Create and install a policy on the sensor.

  d.

  Establish communication between Security Manager and the IDP sensor.

  e.

  Configure the sensor deployment mode and management interface IP.

  f.

  Test connectivity through the sensor.

  Which order is correct when initially deploying a sensor in a network?

  A. b, f, e, a, d, c

  B. e, a, d, c, b, f

  C. a, e, d, c, f, b

  D. e, a, d, b, f, c

  Correct Answer: D

• Question 124:

  Which sensor process records unique network activity at layers 3, 4, and 7?

  A. idpLogReader

  B. sciod

  C. profiler

  D. idp

  E. agent

  Correct Answer: C

• Question 125:

  What contains instructions on how the sensor should decode protocols?

  A. detector.o

  B. policy.set

  C. ACM

  D. PCAP files

  Correct Answer: A

• Question 126:

  When you have two IDP sensors in a cluster, and the sensors are using external HA, which three devices will be performing the failure detection and failover execution? (Choose three.)

  A. bypass units connected to the sensors

  B. firewalls running a redundancy protocol

  C. routers running a redundancy protocol

  D. IDP sensors

  E. load balancers

  Correct Answer: BCE

• Question 127:

  In which three situations would you create a compound attack object? (Choose three.)

  A. When the pattern "@@@@@@@@" and context "ftp-get-filename" completely define the attack.

  B. When attack objects must occur in a particular order.

  C. When one of the attack objects is a protocol anomaly.

  D. When the pattern needs to be defined using a stream 256 context.

  E. You have at least two attack objects that define a single attack.

  Correct Answer: BCE

• Question 128:

  Which statement is NOT true?

  A. Target platform of idp-sos3.0 indicates the platform is software that runs on an ISG1000 or ISG 2000.

  B. Target platform of sos.5.0.0 indicates the platform runs Screen OS software that supports Deep Inspection.

  C. Target platform sos-av.5.0.0 indicates the platform is Screen OS software that supports the Anti-Virus feature.

  D. Target platform of idp-4.0.0 indicates the platform is software that runs on an IDP sensor.

  Correct Answer: C

• Question 129:

  Which two tasks can be performed using the ACM? (Choose two.)

  A. Upgrade the firmware on the IDP sensor.

  B. Install a policy on the IDP sensor.

  C. Change the mode in which the sensor is operating.

  D. Change the management IP address for the IDP sensor.

  Correct Answer: CD

• Question 130:

  How can you monitor real-time IP flows through the IDP sensor?

  A. Use the sensor commandsctop.

  B. Use the Security Manager GUI traffic logs.

  C. Use the Security Manager GUI dashboard.

  D. Enable debug flow basic on the sensor.

  Correct Answer: A